LLMs are great at finding 0-day, and people are rubbish at updating their containers and hosts to patch b-day.

Containers have access to the kernel ABI, and as shown in the latest kernel exploits, all the memory handling surface that exposes. The virtualisation interface, offering fewer services, is significantly harder.

Containers are obviously lighter than VMs, both to start and to schedule, but firecracker is pretty fast. gVisor pays overhead per syscall vs at startup.

So yeah, more vulnerable.